CVE-2022-26711

Katalog CVE

CVSS 9.8 · Critical EPSS 3,8%

Kerentanan Integer Overflow or Wraparound pada apple itunes, apple ipados +4 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

An integer overflow issue was addressed with improved input validation. This issue is fixed in tvOS 15.5, iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

Rincian

Terbit di NVD

26 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

3,8% peluang dieksploitasi; lebih tinggi dari 89,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/en-us/HT213253 release notes · advisory vendor
• https://support.apple.com/en-us/HT213254 release notes · advisory vendor
• https://support.apple.com/en-us/HT213257 release notes · advisory vendor
• https://support.apple.com/en-us/HT213258 release notes · advisory vendor
• https://support.apple.com/en-us/HT213259 release notes · advisory vendor